9d6a13b0e93b6faec1755290c05c44798b73cfceb49506517e7ebe557b713103 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9d6a13b0e93b6faec1755290c05c44798b73cfceb49506517e7ebe557b713103
Size

80KB
MD5

122a4d57216e4592083220e9a1eed819
SHA1

9382918cb6078f5490196ac7264fb09b5ef834b3
SHA256

9d6a13b0e93b6faec1755290c05c44798b73cfceb49506517e7ebe557b713103
SHA512

90446b3567785e1e0732b6c0317f31b6426cc70061b4e80c033f584694d1005b029e590edaefb2e762d14eeb5ea922aeb0cfae08667e4ff47e1e649a5cf828d6
SSDEEP

1536:xPZKJPTT/61F7mjSfTaGZYI5y/x4NL9w5i0uCs82hW8fPL:xP4PX4F6uLpGt4h9w5i028vYL

Score

N/A

Malware Config

Signatures

Files

9d6a13b0e93b6faec1755290c05c44798b73cfceb49506517e7ebe557b713103
.exe windows x86

7a0530c3724ff32c1155f8511cdf48b3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ConnectNamedPipe
AddAtomA
GetEnvironmentVariableA
DeleteFileW
GetProfileStringW
EscapeCommFunction
DuplicateConsoleHandle
GetCommProperties
GlobalUnfix
WriteProcessMemory
SetLastError

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rrdata
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE